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PATENT APPLICATION 



SYSTEM AND METHOD USING INFORMATION BASED INDICIA FOR 
SECURING AND AUTHENTICATING TRANSACTIONS 



5 



TECHNIC AL FIELD OF THE INVENTION 

System, method, and apparatus for authenticating or validating a transaction or 
record using information-based indicia of payment or authorization. 

10 BACKGROUND OF THE INVENTION 

The United States Post Office (USPO) has been considering electronic postage 
stamps for several years. According to the USPO (http://56.0. 78.92/html/ibirnain.html), 
electronic postage should be printed on an envelope in the upper right hand corner (or on 
a label for an envelope or package), convey evidence that postage has been paid, contain 
1 5 mail processing data requirements, and contain security-related data elements. As shown 
in Figure 1, the USPO desires that an electronic postage stamp be made up of human 
readable information as well as a two dimensional barcode with the following 
information: 



20 



Licensing ZIP Code 
Date of Mailing 
Destination Delivery Point 



Postage 



Software ID 



25 



Digital Signature 
Ascending Register 



Rate Category 
Descending Register 



Reserve Field 



Algorithm ID 
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• Indicia Version Number 

• Device ID 

• Certificate Serial Number 

There are presently several competing commercial schemes for electronic postage. 

5 Typically these schemes are based on digital certificates. One such scheme provides a 

way for the postal vendor to access a secure nonvolatile memory on a user's computer 
with a postage printing program. The goal here is to control the printer so that it never 
prints a given certificate twice, i.e., never prints the same certificate onto more than one 
copy of a label or envelope. Yet another scheme uses a unique mail piece identifier 

1 0 generated by a trusted third party for encrypting the postage information. The encrypted 
information is then printed on the mail piece. The problem with such methods is that 
because certificate information can be easily photocopied, the goal of security is not 
achieved. Unless the certificates are checked for re-use with an expensive database 
lookup system, there is no reliable way to prevent the certificate information from being 

1 5 copied and reused illicitly. Thus, none of the competing schemes provide a way to fully 
authenticate the electronic transactions generating the electronic stamps. Without 
adequate protection against copying, tremendous amounts of revenue are at risk. 

Another problem with current schemes is that they typically do not provide an 
easy mechanism for revocation and replacement of electronic stamps in the case that an 

20 envelope tears or the printer jams. Inadvertent failure to mail a stamped article on the 

date encoded in the e-stamp certificate results in a similar problem ~ how can the user 
avoid forfeiting the money spent to purchase the postage? Some current schemes provide 
limited functionality for redating or otherwise correcting e-postage, but current 
techniques are typically clumsy and inefficient, which is particularly costly when one 

25 considers that postage stamps are used in extremely heavy volume. 

The same needs and problems apply more generally to information-based indicia 
("IBI") for transactions besides postage, such as facility admission tickets (for events, 
movies, travel, etc.), coupons, vouchers, certificates, visas, receipts, and checks. 
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SUMMARY OF THR INVENTION 

The present invention provides a method, apparatus, and system for securing and 
authenticating information based indicia that substantially eliminates or reduces certain 
disadvantages from previous D3I systems and methods. 

One aspect of the invention described herein includes presenting a nonce stamp 
bearing a nonce; presenting a numbered digital certificate derived securely from the 
nonce, such as by encryption; and authenticating the transaction by comparing the 
number on the digital certificate and the nonce. 

Typically the nonce may be represented on the nonce stamp in a form such as a 
bar code that can be read by humans and/or by standard image scanners. The digital 
certificate may be marked on a physical medium, and represented in the form of a two 
dimensional bar code. 

Verifying the authenticity of a presented nonce stamp / certificate pair (and/or the 
authenticity of the transaction for which they are presented as indicia) is accomplished by 
comparing the number on the digital certificate and the nonce. Where the certificate is 
derived by encrypting the nonce using a private key for which an associated public key is 
made widely available, verification may be performed by decrypting the number on the 
presented digital certificate and matching the result against the presented nonce. 
Alternatively, if there is no public key then the verifying authority will be given access to 
the private key, and can perform verification by encrypting the presented nonce and 
comparing the result with the number on the presented digital certificate. 

In typical applications, an end user customer obtains a digital certificate to 
accompany a nonce stamp by specifying a desired transaction, paying the purchase price 
for that transaction, and inputting the nonce number from a nonce stamp of the user. In 
some embodiments, users may obtain digital certificates remotely such as via an 
electronic communications network. In such embodiments digital certificate information 
(including the encrypted number for the digital certificate) may be electronically 
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transmitted to the user via network, and a tangible copy of the certificate is printed locally 
for the user. 

In a preferred embodiment, the numbered digital certificate further includes a 
description of at least one element of the desired transaction, for example, purchase price, 
5 purchased product/service, and/or transaction authority. 

In typical applications, the nonce stamp and the numbered digital certificate are 
physically linked or coupled together, such as by printing the numbered digital certificate 
onto the nonce stamp, or by affixing the stamp and certificate to each other or to an article 
of the transaction such as a mailing envelope. 

10 In one application, the transaction includes depositing an article of mailing, and 

the nonce stamp and the numbered digital certificate are presented as postage. In another 
application, the transaction includes admission to a facility, and the nonce stamp and the 
numbered digital certificate are presented as an admission ticket. In yet other 
applications, the nonce stamp and digital certificate function as traveler's checks or as 

15 personal checks. 

Apparatus of the invention includes an information-based indicium for 
authenticating a desired transaction. This indicium includes a nonce stamp having a 
nonce; and a digital certificate including a number derived securely from the nonce, such 
that the digital certificate and the nonce stamp may be presented together to authenticate 
20 the desired transaction. In another aspect of the invention, the information-based indicium 
may comprise a forgery-resistant physical article bearing an identification number; and a 
digital certificate including a number derived securely from the identification number, 
such that the digital certificate and the forgery-resistant article may be presented together 
to authenticate the desired transaction. 

25 Further aspects of the invention include a system for generating information-based 

transaction indicia for a user's desired transaction. The system includes one or more 
computers configured to receive as input a nonce number from the user's nonce stamp; to 
encrypt the nonce number; and to provide to the user a digital certificate including the 
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encrypted nonce number, such that the nonce stamp and the digital certificate may 
collectively be presented as an information-based indicium to authenticate the desired 
transaction. In typical applications, the one or more computers are further configured to 
specify a user's desired transaction and to charge the user a transaction price for the 
5 desired transaction, in exchange for providing the digital certificate. In some applications 
the computers may not be configured to charge the user prior to providing the digital 
certificate, and instead the user may be charged (such as through a banking system) after 
the certificate / nonce stamp pair is negotiated. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present invention and the advantages 
thereof, reference is now made to the following description taken in conjunction with the 
accompanying drawings in which like reference numerals indicate like features and 
wherein: 

1 5 FIGURE 1 is an illustration of a prior art IBI as described by the United States 

Post Office. 

FIGURE 2 is a flow chart illustrating one embodiment of the method of the 
invention. 

FIGURE 3a is an illustration of a system used in the practice of the invention. 

20 FIGURE 3b is an illustration of a further system used in the practice of the 

invention. 
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DFTATTJKD DESCRIPTION OF THE INVENTION 

Preferred embodiments of the present invention are illustrated in the figures, like 
numerals being used to refer to like and corresponding parts of the various drawings. 

For convenience we define the term "nonce stamp." The term "nonce stamp" is 
5 used herein to denote a physical article that is relatively difficult to copy illicitly (or 

equivalently, for which forgeries are easily detected and are preferably traceable) -- such 
as a typical postage stamp, for example » and that also bears a "nonce." In computer 
science, the term "nonce" generally means a "fresh number," a number that is unique or 
virtually unique within some context of interest. In the context of the present invention, 
1 0 "nonce" denotes a number (or other datum) chosen from a good enough distribution to 
ensure relative "uniqueness," i.e., a low likelihood that a single user/customer can 
accumulate multiple nonce stamps bearing the same nonce number. It should be noted, as 
will be apparent to practitioners in light of the teachings herein, that postage is just one 
beneficial application for the present invention and is by no means the only one. The 
1 5 term "nonce stamp" is not intended to narrowly denote postage stamps only, but should 
rather be construed broadly to denote any physical article that is relatively difficult to 
copy illicitly and that incorporates a nonce. 

By way of introduction, the present invention provides a nonce stamp based 
system, method, and apparatus for creating and checking information-based indicia 

20 suitable for trusted authentication of transactions. Such indicia may include, for example, 
postage, admission tickets, coupons, vouchers, certificates, visas, receipts, and checks. In 
a preferred aspect of the invention, physical nonce stamps are created and distributed 
freely at little or no cost to users/customers. Users can then use convenient means to 
order, purchase and print digital certificates for postage or for other desired transactions 

25 as needed, as will be described below. Because each nonce stamp has no economic value 

without an accompanying authentic digital certificate, the nonce stamps can be widely 
distributed in large numbers in advance at nominal cost. An encryption process for 
generating authentic digital certificates based on the nonce effectively prevents illicit 
creation of digital certificates that can satisfy the authentication check, as discussed in 
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more detail below. And physical duplication of an authentic digital certificate poses no 
economic threat, because each certificate can only be used to authenticate a transaction 
(and thus only has economic value) if accompanied by the single, duplication-resistant 
nonce stamp from which the authentic certificate was derived. 

5 One embodiment of a method in accordance with the present invention is 

illustrated in Figure 2. A user first obtains a nonce stamp 200, typically for no charge or 
for nominal charge. In order to conduct an authenticated transaction, a user/customer 
submits a request for a transaction certificate by specifying the desired transaction 210 
(e.g., an order for a quantity of U.S. postage) and by typically making payment of the 

1 0 price for the desired transaction, and also presents and/or inputs (220) the nonce stamp 
number. Note that in practice and as a matter of convenience, users may be required to 
pre-purchase minimum-size blocks of credits for their account (e.g., for postage), and in 
that case payment 210 typically entails an electronic deduction being made from the 
user's pre-paid account. In any event, and in response to inputs 210-220, the nonce is 

1 5 encrypted (230). Standard encryption techniques as known to practitioners are 

sufficient; an underlying principle being that the encryption key preferably should not be 
readily recoverable from knowledge of particular nonce / encrypted nonce pairs, since 
otherwise it becomes trivial to illicitly create an authentic-seeming digital certificate for 
any given nonce. The result of encryption 230 is included in digital certificate 

20 information that is generated 240 and delivered to the user 250. 

Next, at step 260, the user/customer presents the nonce stamp and digital 
certificate pair to a vendor or other transaction authority to authenticate the desired 
transaction, such as by affixing the nonce stamp and digital certificate as postage on an 
article of mailing and depositing the article into the mail system. At decision point 270, 
25 the authenticity of the desired transaction is verified by comparing the number contained 

on the digital certificate and the nonce on the nonce stamp. In embodiments of the 
present invention, this comparison test can be done in relatively straightforward 
algorithmic fashion. For example, in some applications the authenticating authority's 
testing computer will have private access to the same secure encryption key that is used 
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to generate digital certificates from nonces. Thus, when presented with a given certificate 
/ nonce pair for authentication at step 270, the transaction authority's testing computer can 
preferably apply encryption to the presented nonce, and simply check the result for 
identity with the number contained in the presented certificate. In other applications, a 
5 public key is available allowing authenticating authorities to decrypt the certificate and 
match the resulting number against the presented nonce number at step 270; in 
accordance with the principles of public key cryptography, well-known to practitioners in 
the art, the public key works only in one direction, and thus permits decryption of a given 
certificate but does not enable (potentially illicit) generation of new, encrypted 

10 certificates for other nonce numbers. In either case, there is no need, e.g., for an 

expensive database tracking all digital certificates. If the result of that test 270 is a match, 
then the transaction authority can approve the transaction 280 (e.g., USPO can accept and 
deliver the article of mailing), whereas if there is no match, then the authority can reject 
the transaction 290 (e.g., USPO returns the article for lack of authentic postage). Note 

1 5 that in embodiments where public key cryptography is used, anyone with access to the 
public key can verify the authenticity of a presented nonce/certificate pair (although they 
cannot illicitly generate such pairs). Thus, for example, a customer can verify the 
authenticity of a purchased certificate prior to mailing his/her letter etc., and can contact 
the certificate vendor if errors are detected. 

20 Figure 3a illustrates one embodiment of a system for practicing methods of the 

present invention. With respect to the method illustrated in Figure 2 and the system 
illustrated in Figure 3a, after obtaining 200 nonce stamp 320, the user can submit his or 
her transaction certificate request along with payment information (e.g. credit card 
number) and with nonce input by using data terminal 300, such as a standard PC, portable 

25 computer, PDA, or even a telephone (steps 210-220). This information is electronically 

transmitted over network links to vendor computer 310. In a preferred embodiment, data 
terminal 300 executes standard internet/web browser software (not shown) and uses 
standard e-commerce infrastructure to support the interaction between user data terminal 
300 and vendor computer 310. 
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In response, the nonce is encrypted 230 by vendor computer 310. The result of 
encryption 230 is embodied in digital certificate information that is generated and 
delivered to the user (240-250) in order to provide the user with digital certificate 340. 
As one example, digital certificate 340 might be produced by first generating an 

5 electronic image file by vendor computer 310 based on the result of encryption 230; that 

image file would then be e-mailed to user data terminal 300, and standard computer 
printer 330 would then be used to print a hard copy of the digital certificate 340. In 
another example, vendor computer 310 might simply send the digital certificate number 
to user terminal 300, and in turn software executing locally at user terminal 300 would 

10 generate digital certificate 340 and cause it to be printed on printer 330. In an 

embodiment where data terminal 300 comprises a standard touch-tone telephone for 
purposes of input 220-230, various approaches are possible: by way of example, in some 
variations digital certificate image information might be sent to a user's fax machine (not 
shown), and in other variations the encrypted number can be communicated to the user 

1 5 via telephone and digital certificate 340 can be manually inscribed by the user on nonce 
stamp 320 or on the transaction object of interest (e.g., an article of mailing). 

Next, at step 260, the user/customer presents nonce stamp 320 and digital 
certificate 340 to transaction authority 350 to authenticate the desired transaction. At 
decision point 270, transaction authority 350 verifies the authenticity of the desired 

20 transaction by submitting the number contained on digital certificate 340 and the nonce 

on nonce stamp 320 to transaction authority computer 360 for a comparison test. In 
typical applications the transaction authority ! s computer 360 either has private access to 
the same secure encryption key that is used by vendor computer 310 to generate digital 
certificates from nonces, or else has access to a public decryption key as discussed above. 

25 Thus, when presented with a given certificate / nonce pair for authentication at step 270, 

computer 360 can preferably apply encryption to the presented nonce, and simply check 
the result for identity with the number contained in the presented certificate ~ or, in the 
public key variation, can decrypt the certificate and check the result for identity against 
the presented nonce — as described above. Note that transaction authority computer 360 

30 need not necessarily be the same physical machine as vendor computer 310 (although it 
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can be); nor must computers 310 and 360 necessarily be kept linked by network or 
otherwise. Also note that at decision point 270 transaction authority 350 preferably also 
physically examines the presented nonce stamp to screen out amateur forgeries and the 
like. 

5 An additional embodiment for practicing the method of Fig. 2 is illustrated in 

Figure 3b. In this variation, user 300 need not be connected electronically with vendor 
310 when operations 210-250 are carried out. Instead, users/customers first obtain 
tamper-resistant secure module 305 from vendor 310, along with accompanying control 
software to be installed on user computer 300. Users can connect electronically to vendor 

10 310 and purchase convenient blocks of credits (postage credits, for example) at any time, 
in response to which vendor computer 310 electronically deposits credits to secure 
module 305. Having performed this initial set-up, users can then initiate operations 210- 
250 on user computer 300 by interacting locally with secure module 305, without 
necessarily being connected to vendor 310. Secure module 305 automatically debits its 

1 5 electronic account for the user by the price of the requested purchase 210, and performs 

secure encryption 230. Secure module 305 is preferably tamper-resistant hardware and/or 
software, in the sense of being protected such that users cannot "hack" or modify its 
operation without disabling it completely; e.g., users cannot illicitly adjust the electronic 
account balance or suppress deduction of the purchase price when certificates are 

20 generated. Embodiments of tamper-resistant modules for electronically purchasing 
blocks of postage credit are already commercially available (e.g., "Electronic Vault" 
provided by E-Stamp of Mountain View, CA, www.estamp.com ) - except that such 
current systems do not create nonce stamp-linked digital certificates and do not practice 
the present invention. Thus, embodiments of secure module 305 can be constructed by 

25 practitioners in light of the novel teachings disclosed herein. 

The nonce is preferably selected randomly from a good enough distribution to 
ensure relative "uniqueness," i.e., a low likelihood that a single user/customer can 
accumulate multiple nonce stamps with the same number (since doing so would enable 
the user to purchase a single authentic digital certificate from one such nonce, and then 
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illicitly make and use copies of that certificate with each of the identical nonce stamps). 
In a preferred embodiment, the nonce is structured and preferably includes a random 
number component as well as source information, a digital signature, and whatever other 
information may be deemed useful for a given application. In the context of postage, for 
5 example, this allows checking the validity of the source of the stamp: e.g., the source 

jurisdiction (country, postal zone or branch, etc.) can be encoded and checked. In some 
applications, the nonce contained on the nonce stamp is printed in the form of a bar code, 
while the encrypted number printed on the digital certificate is a two dimensional bar 
code. In a preferred embodiment, the nonce is represented in a form (such as a bar code, 

10 for example) that can be read by humans and/or by standard image scanners, so that the 
user does not necessarily need special-purpose hardware in order to input nonce 
information when obtaining a digital certificate. In various embodiments, the nonce 
stamp and derived digital certificate are physically affixed to a transactional object for 
which authentication is desired by the user/customer (e.g., affixing nonce postage to an 

1 5 article of mailing); in other embodiments either or both of the certificate / nonce stamp 

pair may remain unattached; in some embodiments the certificate may be printed, 
marked, or affixed onto the nonce stamp; and in various embodiments there may not be a 
transactional object separate from the nonce stamp itself (e.g., nonce admission tickets for 
movies or special events, or pre-printed nonce envelopes for mailing). 

20 In further embodiments and variations, multiple digital certificates may be 

required in combination with a single nonce stamp, akin to requiring multiple signatures 
for approval of a transaction. A further variation would require multiple, distinct nonce 
stamp / certificate pairs as authentication indicia for a single transaction, in order to 
further protect against the (unlikely) prospect of a user ever obtaining duplicate nonces. 

25 In yet another embodiment, the digital certificate may be presented to the transaction 

authority (step 260, Fig. 2) by electronic transmission and not necessarily in printed or 
other tangible form. 

A preferred, illustrative application for nonce stamps is electronic postage. In an 
embodiment of this application, the postal service or an authorized agent issues and 
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distributes nonce stamps at nominal or zero cost. When a customer wishes to purchase an 
amount of postage, the nonce number, the desired postage amount, and various other bits 
of information (such as data required by the USPO as shown in Figure 1) are combined to 
generate a digital certificate. Generation and purchase of the digital certificate can be 
5 conducted conveniently by the customer in an online electronic transaction leveraging 
conventional e-commerce infrastructure, as described previously in connection with 
Figures 3a and 3b. The postal item can then be mailed by or for the customer by affixing 
the digital certificate and the original nonce stamp. The authenticity of the postage can be 
established by checking the nonce in the affixed nonce stamp against the number 
10 incorporated in the digital certificate, as described earlier, and in addition the certificate 
can be examined for authenticity of other indicia such as the signature etc. 

Another illustrative application involves online / remote purchase of admission 
tickets, in a context where manually examining each customer's ID at the door is 
impractical or is at least too time consuming to be optimal (such as for movie theater 

15 admissions). Zero-value nonce tickets can be distributed in large quantity at zero or 
nominal cost by movie theaters, concert venues, etc. Users/customers who purchase 
tickets online can input the nonce from a nonce ticket they have around, and obtain a 
digital certificate as illustrated in Figure 2. In some applications, the certificate would 
also explicitly specify the particular movie or event for which admission was purchased. 

20 In one embodiment, users would obtain (again, at relatively nominal cost) blank stickers 

designed to be fed to standard computer printers, upon which the purchased digital 
certificate information would be printed. Users would affix such a printed sticker to a 
nonce ticket, and scanner/reader machines at the admission doors to participating theaters 
and venues would immediately confirm or reject the validity of such tickets. Here, again, 

25 the threat of users making multiple copies of purchased certificates is defeated by 

requiring that each certificate be presented and surrendered along with the copy-resistant 
nonce ticket used to derive that certificate. 

Another illustrative application facilitates the convenient, online / remote 
purchase of traveler's checks. Here again, zero-value nonce checks can be made readily 
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available to prospective customers in relatively large quantity at zero or nominal cost. 
Users/customers can conveniently purchase valuable checks online by inputting the nonce 
from a nonce check they have around, and obtaining a digital certificate as illustrated in 
Figure 2. In one embodiment, users would print the received digital certificate 
5 information onto stickers as in the previous example; in another embodiment, users could 
manually write the digital certificate information on the check. On presenting the check 
to a merchant the merchant could verify the authenticity of the instrument by scanning or 
keying the nonce number and the certificate number, and using a public decryption key 
made available by the issuing bank to perform the authentication check as discussed 
10 previously in connection with decision point 270 (Fig. 2). 

In this application, merchants preferably would continue to require customer 
signatures and ID verification as with traditional travelers checks; the invention basically 
allows easy authentication of a presented check (i.e., is this check backed by a promise to 
pay by the issuing bank, or is it a forgery), whereas a user ID check is still required to 

1 5 deter theft of checks and allow issuing banks to offer replacement/refund of lost or stolen 
checks. In a preferred embodiment, nonce checks would visually indicate a denomination 
amount ($20, $50, $100, etc.) such that users cannot easily forge the denomination, and 
the nonce number would also include a component reflecting that amount so that users 
cannot illicitly purchase, say, a $20 digital certificate for use with a $100 denomination 

20 nonce check. In the latter case, vendor computer 310 would catch and refuse the $20 

order because it would compare the denomination component of the input nonce number 
with the requested certificate denomination; and of course if a user inputs a false nonce 
number in which the denomination component has been changed (say from 100 to 020), 
then the resulting $20 digital certificate will not test as authentic when paired with the 

25 $ 1 00 denomination nonce check that the user actually holds. 

Applications are also possible in which the user does not pay a transaction price in 
advance, in exchange for the certificate; instead, an authentic nonce stamp / certificate 
pair would work like a personal check, but with enhanced protection against forgery. A 
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merchant who accepts an authentic nonce check / certificate pair would negotiate the pair 
through the banking system. 

Nonce postage, nonce tickets, and other nonce stamp applications offer several 
potential advantages over existing forms of information based indicia. For example, their 
5 authenticity can be easily checked without requiring expensive database maintenance and 

lookup, as previously discussed. In addition, because digital certificates can be 
reproduced with relative ease, existing electronic stamps (for example) typically encode 
extra information within each certificate, such as addressee information and the date of 
mailing, in order to prevent the same e-stamp from being reused on a different day or 

1 0 with a different addressee; but consequently, any change in the date of mailing may entail 
forfeiting value. In contrast, in accordance with the present invention, a vendor of nonce 
digital certificates can, if requested by a user and if legitimate exchanges are allowed, 
transmit an extra copy of a previously purchased digital certificate but with a new date (or 
can disseminate to users electronic certificates and software making the date field very 

1 5 easily modifiable), secure in the knowledge that the user/customer can ultimately only 

use one copy of a certificate with a given encrypted number to authenticate a transaction, 
because of the required binding to an irreproducible nonce stamp. (Alternatively, nonce 
stamps in accordance with the present invention may obviate the need for restrictive date 
constraints, since nonce stamps can provide reasonably strong confirmation of 

20 authenticity based simply on the nonce number and the certificate number.) For similar 
reasons, a digital certificate that requires any other modifications not affecting price (e.g., 
user wishes to change the addressee zip code field in a postage certificate), or that is 
accidentally damaged or destroyed such as by a printer jam, can readily be replaced in 
accordance with preferred embodiments of the present invention. 

25 The invention presents a general scheme for establishing and checking the 

authenticity and uniqueness of electronic certificates. While the above description 
includes many specifics and examples, these should not be construed as limitations on the 
scope of the invention, but rather as exemplification of a preferred embodiment thereof. 
Many other variations are possible. For example, the markings on the nonce stamp do 
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not have to be numeric. Any marking, image, or other fixed encoding of information on a 
forgery-resistant physical object that can be conveniently and securely encrypted to yield 
a derived encoding that can be incorporated into a digital certificate, would serve just as 
well. Likewise, the "number" on the digital certificate need not be marked in explicitly 
5 numeric fashion. Practitioners will further recognize that a wide variety of applications 
for information-based indicia may be practiced in accordance with, and by taking 
advantage of, the methods and systems disclosed herein. 

Although the present invention has been described in detail, it should be 
understood that various changes, substitutions and alterations can be made hereto without 
10 departing from the spirit and scope of the invention as described by the appended claims. 



7058620 .1 
1190526-991100 



Page 15 of 23 



CLAIMS: 



1 . A method for authenticating a transaction comprising the steps of: 
presenting a nonce stamp having a nonce; 

presenting a numbered digital certificate derived securely from the nonce; and 
authenticating the transaction by comparing the number on the digital certificate 
and the nonce. 

2. The method of Claim 1 , wherein the nonce is represented on the nonce stamp 
within a bar code. 

3. The method of Claim 1, wherein the digital certificate is marked on a physical 
medium. 

4. The method of Claim 1, wherein the number on the digital certificate is 
represented within a two dimensional bar code. 

5. The method of Claim 1, wherein the numbered digital certificate is derived by 
encrypting the nonce number. 

6. The method of Claim 5, wherein comparing the number on the digital certificate 
and the nonce comprises encrypting the nonce, and matching the encrypted nonce 
against the number on the digital certificate. 

7. The method of Claim 5, wherein comparing the number on the digital certificate 
comprises decrypting the number on the digital certificate and matching the 
decrypted number with the nonce. 

8. The method of Claim 1, further comprising obtaining the digital certificate for a 
user by paying a purchase price for the transaction. 
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The method of Claim 8, wherein obtaining the digital certificate is performed 
remotely via an electronic communications network. 

The method of Claim 9, wherein the user is in physical possession of the nonce 
stamp, and wherein obtaining the digital certificate for the user further comprises 
remotely transmitting the nonce. 

The method of Claim 10, wherein obtaining the digital certificate further 
comprises deriving the number on the digital certificate by encrypting the nonce 
remotely transmitted for the user. 

The method of Claim 11, wherein obtaining the digital certificate further 
comprises transmitting digital certificate information, including the number on the 
digital certificate, to the user via the electronic communications network. 

The method of Claim 12, wherein obtaining the digital certificate further 
comprises receiving the digital certificate information and locally printing a 
tangible copy of the numbered digital certificate. 

The method of Claim 8, wherein obtaining the digital certificate is performed 
using a tamper-resistant module at a system local to the user, the tamper-resistant 
storing user account information. 

The method of Claim 14, wherein the user connects electronically to a remote 
vendor in order to purchase credit for the user account stored by the tamper 
resistant module. 

The method of Claim 15, wherein the vendor remotely updates, via electronic 
network, the account information in the tamper-resistant module. 
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17. The method of Claim 1, wherein the numbered digital certificate further 
comprises a description of at least one element of the transaction selected from the 
group consisting of purchase price, purchased product/service, transaction 

5 authority. 

18. The method of Claim 1, wherein the nonce stamp and the numbered digital 
certificate are physically coupled together. 

10 19. The method of Claim 1 8, wherein the numbered digital certificate is printed on 
the nonce stamp. 

20. The method of Claim 1, wherein the nonce stamp and the numbered digital 
certificate are physically coupled to an article of the transaction. 

15 

21 . The method of Claim 1 wherein the transaction comprises depositing an article of 
mailing, and the method further comprises presenting the nonce stamp and the 
numbered digital certificate as postage for the article of mailing. 

20 22. The method of Claim 1 wherein the transaction comprises admission to a facility, 
and the method further comprises presenting the digital certificate and the nonce 
stamp as a ticket for admission to the facility. 

23. An information-based indicium for authenticating a desired transaction, 
25 comprising: 

a) a nonce stamp comprising a nonce; and 

b) a digital certificate comprising a number derived securely from the nonce; 
wherein the digital certificate and the nonce stamp may be presented together to 
authenticate the transaction by comparing the number on the digital certificate and 

30 the nonce. 
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24. The information-based indicium of Claim 23, wherein the nonce is represented on 
the nonce stamp within a bar code. 

25. The information-based indicium of Claim 23, wherein the digital certificate is 
marked on a physical medium. 

26. The information-based indicium of Claim 23, wherein the number on the digital 
certificate is represented within a two dimensional bar code. 

27. The information-based indicium of Claim 23, wherein the numbered digital 
certificate is derived by encrypting the nonce. 

28. The information-based indicium of Claim 27, wherein comparing the number on 
the digital certificate and the nonce comprises encrypting the nonce, and matching 
the encrypted nonce against the number on the digital certificate. 

29. The information-based indicium of Claim 23, wherein the numbered digital 
certificate further comprises a description of at least one element of the 
transaction selected from the group consisting of purchase price, purchased 
product/service, and transaction authority. 

30. The information-based indicium of Claim 23, wherein the nonce stamp and the 
numbered digital certificate are physically coupled together. 

3 1 . The information-based indicium of Claim 23, wherein the numbered digital 
certificate is printed on the nonce stamp. 

32. The information-based indicium of Claim 23, wherein the nonce stamp and the 
numbered digital certificate are physically coupled to an article of the transaction. 
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33. 



The information-based indicium of Claim 23 wherein the transaction comprises 
depositing an article of mailing, and the information-based indicium comprises 
postage for the article of mailing. 



34. The information-based indicium of Claim 23 wherein the transaction comprises 
admission to a facility, and the information-based indicium comprises a ticket for 
admission to the facility. 

10 35. A system for generating information-based indicia for a user's desired transaction, 
comprising one or more computers configured to: 

a) receive as input a nonce from a nonce stamp of the user; 

b) encrypt the nonce; and 

c) provide to the user a digital certificate comprising the encrypted nonce, 

1 5 whereby the nonce stamp and the digital certificate may be collectively presented 

as an information-based indicium for the desired transaction. 

36. The system of Claim 35, wherein the one or more computers are further 
configured to specify a user's desired transaction, and to charge the user a 

20 transaction price for the desired transaction. 

37. The system of Claim 36, wherein the computers are configured to charge the user 
prior to providing the digital certificate to the user. 

25 38. The system of Claim 36, wherein the computers are configured to receive the 

nonce, encrypt the nonce, specify the desired transaction, charge the user, and to 
provide the digital certificate, at least partly through remote interaction between 
the user and a vendor across one or more electronic communication networks. 
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39. The system of Claim 38, wherein the remote interaction is conducted between 
client browsing software of the user and an Internet site of the vendor. 

40. The system of Claim 38, wherein the computers are configured to provide the 
digital certificate to the user by transmitting digital certificate information, 
including the number on the digital certificate, to the user via the electronic 
communications network. 

41 . The system of Claim 40, wherein the computers are further configured to provide 
the digital certificate to the user by receiving the digital certificate information at 
the user's end and locally printing a tangible copy of the digital certificate. 

42. The system of Claim 36, wherein the one or more computers include a tamper- 
resistant module local to the user, and are configured to encrypt the nonce using 
the tamper-resistant module. 

43. The system of Claim 42, wherein the tamper-resistant module stores user account 
information, and wherein the one or more computers are configured to charge the 
transaction price by using the tamper-resistant module to update the stored 
account information. 

44. The system of Claim 43, wherein the tamper resistant module is intermittently 
coupled, via network, to a remote vendor who updates the stored account 
information to reflect credit purchased by the user. 

45. The system of Claim 35, wherein the transaction comprises mailing an article of 
mailing and the information-based indicium comprises postage. 

46. The system of Claim 35, wherein the transaction comprises gaining admission to a 
facility and the information-based indicium comprises an admission ticket. 
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47. An information-based indicium comprising: 

a) a forgery-resistant physical article bearing an identification number; 

b) a digital certificate including a number derived securely from the 
identification number; 

wherein the information based indicium may be authenticated by comparing the 
number on the digital certificate and the identification number. 

48. The information-based indicium of Claim 47, wherein the identification number is 
represented on the physical article in a human-readable form. 

49. The information-based indicium of Claim 48, wherein the identification number is 
represented on the physical article in a form readable by standard image scanners. 
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SYSTEM AND METHOD USING INFORMATION BASED INDICIA FOR 
AUTHENTICATING TRANSACTIONS AND RECORDS 

5 ABSTRACT QF THE DISCLOS URE 

Method, system, and apparatus for authenticating transactions and records. A 
nonce stamp is a physical article that is relatively difficult to copy illicitly, and that bears 
a "nonce" number. The "nonce" is a relatively unique identifier, in that it is chosen from 

10 a distribution such that any given user/customer is extremely unlikely to obtain two nonce 
stamps bearing the same nonce. The method includes: presenting a nonce stamp having a 
nonce number; presenting a numbered digital certificate derived securely from the nonce 
number; and authenticating the transaction by comparing the number on the digital 
certificate and the nonce number. The digital certificate is typically obtained by 

1 5 users/customers in exchange for the purchase price of a desired transaction. The 

apparatus is an information-based indicium including a nonce stamp, and a digital 
certificate including a number derived securely from the nonce. The system generates 
information-based transaction indicia, and typically includes one or more computers 
configured to receive as input a nonce number from a user; encrypt the nonce number; 

20 and provide to the user a digital certificate including the encrypted nonce number, so that 

the nonce and the digital certificate may be collectively presented as an information- 
based transaction indicium to authenticate a transaction.. 
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[FIGURE 1] 

[Prior Art - from http://56.0.78.92/htmI/ibimain.html] 
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